This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json) Hash identifier: IH9v6suoPHD007P4SYK6/T5aIidQenWSziS+smyX/0Q= Subject key identifier: 5A:F1:FD:DD:DD:DA:1C:44:53:28:C5:3B:A7:4D:9D:57:1C:55:DA:BC Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36 Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336 Certificate serial: 019B32D7156614D032ED4D6EAAE558FFDF60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 19:01:55 +0000 Manifest this update: Thu 18 Dec 2025 19:01:55 +0000 Manifest next update: Fri 19 Dec 2025 19:01:55 +0000 Files and hashes: 1: 1Pr3Rju9xHQPfWV31auS4t6_JKs.roa (hash: U6YPngmDoN0L1hanOZmXAZn1QKdSvL9NB2XC3NylzBI=) 2: EH68L41xD3pAELgVd86O10m8MkI.roa (hash: kVF4w9/67ztXyrHF78GW0MvfXrSQ0p5+COw2F7wfCkg=) 3: JCElWnpyHCGRVw4kJTI2wPhKalo.roa (hash: rPdh51cCsDaaE54oeGhrfMuu194frpT1l20RBDB0eJs=) 4: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: RP3FsMx1ntXlOoKsNdl3egck+LG84vCM/oFiHkwGyfE=) 5: fZauZUiMq7QzdDKqVQAM0BTNdqg.roa (hash: 7Avl6IIjQaZ1np/4jtmkn7cQrYx+SSD6VScCgiCbrdk=) 6: mQw87omeSTSQ0GNmmy4NZ7MZg5c.roa (hash: nOiR+/wPsaUWm0acT8TdN25G4tHF28XiNptSgXF2Czo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:15:66:14:d0:32:ed:4d:6e:aa:e5:58:ff:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336 Validity Not Before: Dec 18 19:01:55 2025 GMT Not After : Dec 19 19:01:55 2025 GMT Subject: CN=5af1fdddddda1c445328c53ba74d9d571c55dabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:24:bd:ec:22:c6:85:2f:f3:d0:6c:03:4a: 14:61:fb:b0:6f:12:a0:b4:9d:1a:08:de:34:7f:6d: d8:aa:8f:b0:40:0d:a1:20:aa:45:02:f4:7b:d4:2b: 32:7d:0c:ed:de:5a:c9:e5:56:db:d5:71:76:d2:38: 49:c0:ee:15:f2:99:8f:23:8a:78:6c:13:45:06:1b: 4e:3c:56:5a:87:a7:67:c8:34:cc:23:77:e8:0c:14: 6e:ad:a0:de:aa:13:11:12:da:72:14:12:51:35:e8: 66:1b:c0:72:e8:2d:84:84:af:0f:b7:10:94:6d:01: 34:7e:e4:54:e0:e8:8a:6e:5c:b0:55:95:4c:1b:9d: 9c:66:21:1b:27:7d:11:2d:77:28:ac:15:d7:ae:88: 67:c6:65:3e:4d:7c:7b:af:e6:0e:83:3e:e0:6e:e1: c7:81:43:be:96:49:e4:8d:05:c2:b2:92:02:bc:c3: c1:7b:29:52:55:2d:4f:f0:e1:3f:f6:f1:6b:08:eb: ea:5a:45:30:c4:60:13:c1:43:9c:2c:9f:39:68:44: 64:81:03:0a:fc:c8:80:a4:ee:57:e6:5a:4a:83:c0: 6c:23:9e:da:0b:7a:31:fe:dc:80:2c:5b:61:03:e0: c4:64:19:aa:86:b4:fb:f9:99:85:4d:81:c0:69:1a: 88:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F1:FD:DD:DD:DA:1C:44:53:28:C5:3B:A7:4D:9D:57:1C:55:DA:BC X509v3 Authority Key Identifier: keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:bb:a8:71:2f:94:95:b5:9f:3b:57:b9:c5:87:c3:ef:71:1c: 86:4a:4c:c2:9b:f1:7b:78:c2:e1:34:14:42:fd:7c:61:81:87: 5d:a6:80:87:18:25:9f:ff:0b:e6:60:5f:1d:3d:60:f0:46:3e: 05:28:e5:f1:32:50:cc:02:4a:23:b7:e3:5e:93:8f:e8:8e:31: 57:e8:66:db:0a:fc:fd:64:d0:37:a1:5e:cc:8b:b0:41:66:2e: 6a:b8:aa:32:0b:98:b6:61:11:d4:5d:60:35:75:40:72:99:3e: 92:16:b2:00:9d:9d:89:3d:f2:4b:cf:40:70:a3:82:c4:fa:e0: 54:fa:43:a7:e1:8f:73:e8:be:fc:21:d3:a5:75:6d:64:f1:24: e4:fd:c9:4d:c0:d1:a7:4f:ec:e9:f3:31:0e:58:04:38:b2:4a: 63:a8:16:a8:99:bd:12:d6:4c:ff:87:2c:82:9c:bd:f6:b4:15: 7e:3c:5f:43:6f:7c:48:75:c7:b4:35:1f:03:6b:b0:fb:df:5f: 53:ff:91:8e:5f:1f:9f:fc:55:a7:00:73:f0:0b:58:c8:cb:cb: a8:33:2c:28:07:21:76:b9:58:bb:4a:11:64:d5:a0:a1:24:36: 97:92:f2:53:11:50:9a:20:1a:c8:d2:f8:c4:08:7c:c9:f3:d1: 9a:4f:b0:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1xVmFNAy7U1uquVY/99gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz NTAzMzYwHhcNMjUxMjE4MTkwMTU1WhcNMjUxMjE5MTkwMTU1WjAzMTEwLwYDVQQD Eyg1YWYxZmRkZGRkZGExYzQ0NTMyOGM1M2JhNzRkOWQ1NzFjNTVkYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHEkvewixoUv89BsA0oUYfuwbxKg tJ0aCN40f23Yqo+wQA2hIKpFAvR71CsyfQzt3lrJ5Vbb1XF20jhJwO4V8pmPI4p4 bBNFBhtOPFZah6dnyDTMI3foDBRuraDeqhMREtpyFBJRNehmG8By6C2EhK8PtxCU bQE0fuRU4OiKblywVZVMG52cZiEbJ30RLXcorBXXrohnxmU+TXx7r+YOgz7gbuHH gUO+lknkjQXCspICvMPBeylSVS1P8OE/9vFrCOvqWkUwxGATwUOcLJ85aERkgQMK /MiApO5X5lpKg8BsI57aC3ox/tyALFthA+DEZBmqhrT7+ZmFTYHAaRqIOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrx/d3d2hxEUyjFO6dNnVccVdq8MB8GA1UdIwQY MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt NGM3N2Q2MDVhZmVjLzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbuocS+U lbWfO1e5xYfD73EchkpMwpvxe3jC4TQUQv18YYGHXaaAhxgln/8L5mBfHT1g8EY+ BSjl8TJQzAJKI7fjXpOP6I4xV+hm2wr8/WTQN6FezIuwQWYuariqMguYtmER1F1g NXVAcpk+khayAJ2diT3yS89AcKOCxPrgVPpDp+GPc+i+/CHTpXVtZPEk5P3JTcDR p0/s6fMxDlgEOLJKY6gWqJm9EtZM/4csgpy99rQVfjxfQ298SHXHtDUfA2uw+99f U/+Rjl8fn/xVpwBz8AtYyMvLqDMsKAchdrlYu0oRZNWgoSQ2l5LyUxFQmiAayNL4 xAh8yfPRmk+wQA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:52:44 2025 by rpki-client